CVE-2008-4147

Drupal Mailsave < 5.x-3.2 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an attached file that has a modified Content-Type.

References (5)

Scores

EPSS 0.0033
EPSS Percentile 55.5%

Classification

CWE
CWE-79
Status published

Affected Products (11)

drupal/mailsave < 5.x-3.2
drupal/mailsave
drupal/mailsave
drupal/mailsave
drupal/mailsave
drupal/mailsave
drupal/mailsave
drupal/mailsave
drupal/mailsave
drupal/mailsave
n/a/n/a

Timeline

Published Sep 24, 2008
Tracked Since Feb 18, 2026